Web Application Penetration Test of an online lottery based on raffle codes